General
-
Target
eb7856b7aef5910a570127af7a95a2ff_JaffaCakes118
-
Size
836KB
-
Sample
240919-q64f1asdmm
-
MD5
eb7856b7aef5910a570127af7a95a2ff
-
SHA1
3331364b06ad31c6953009dd838f8a1c3c98d6ec
-
SHA256
c18f54bdea2fb66a02a2f871de2b02c1f4ff8bc40789eb17a7050a6926e26230
-
SHA512
3f3a5e81bf6dcd0c0bc9355c67c339e2faead9de638dc89a11a544fe6984a75d10e94de2691b86f669c370a154be447fc77d528bd8bcc5f3a9a408317483bf19
-
SSDEEP
24576:JPipyklwCMvru5KKTOFWQbwRseoT0u28mczO7+:JPi+VWQb28T0dczA+
Behavioral task
behavioral1
Sample
eb7856b7aef5910a570127af7a95a2ff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb7856b7aef5910a570127af7a95a2ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
eb7856b7aef5910a570127af7a95a2ff_JaffaCakes118
-
Size
836KB
-
MD5
eb7856b7aef5910a570127af7a95a2ff
-
SHA1
3331364b06ad31c6953009dd838f8a1c3c98d6ec
-
SHA256
c18f54bdea2fb66a02a2f871de2b02c1f4ff8bc40789eb17a7050a6926e26230
-
SHA512
3f3a5e81bf6dcd0c0bc9355c67c339e2faead9de638dc89a11a544fe6984a75d10e94de2691b86f669c370a154be447fc77d528bd8bcc5f3a9a408317483bf19
-
SSDEEP
24576:JPipyklwCMvru5KKTOFWQbwRseoT0u28mczO7+:JPi+VWQb28T0dczA+
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-